This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ZtShHMz-REHUe_J3G7Tmy5eaDh0.roa File: ZtShHMz-REHUe_J3G7Tmy5eaDh0.roa (raw, json) Hash identifier: Fy2XCkK7ctUyF3V7KU+txzoLT8gfSrRwreVPim8LfHI= Subject key identifier: 66:D4:A1:1C:CC:FE:44:41:D4:7B:F2:77:1B:B4:E6:CB:97:9A:0E:1D Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6AD0558C4E35F2CEC06B4749809BF Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ZtShHMz-REHUe_J3G7Tmy5eaDh0.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211577 IP address blocks: 82.129.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ad:05:58:c4:e3:5f:2c:ec:06:b4:74:98:09:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d4a11cccfe4441d47bf2771bb4e6cb979a0e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:fc:41:a9:06:b1:fa:4d:df:e0:f8:c9:e5: 2d:6c:34:2e:46:83:66:4b:63:79:7e:97:72:46:4e: 69:6b:7c:fe:af:92:da:54:04:95:80:9e:cb:7c:79: e1:42:0d:61:b0:ec:46:eb:bb:81:1d:cd:0d:52:8e: 4f:38:cc:c7:6c:82:d0:23:e4:7e:e1:62:b7:93:6f: c5:1d:f4:aa:8c:4a:82:ac:7a:35:4c:10:80:a1:e8: 3e:61:ff:03:b3:0b:1c:64:50:8c:3d:cb:d7:cd:47: 13:f7:ac:1b:a9:af:9c:a2:ae:7e:c8:53:92:86:aa: e7:4a:02:9c:a2:90:a1:bc:c9:e2:37:1b:6c:68:75: b0:bb:e4:f6:56:71:26:9b:a6:a9:d5:1f:b3:7c:89: 50:91:51:ed:17:91:ab:cf:4b:e2:41:5b:6a:79:df: 52:e5:70:53:e4:08:64:db:4c:f9:a4:32:aa:53:08: bb:63:0e:3b:2f:86:91:82:ee:fc:38:13:df:e3:83: ae:12:e5:58:56:85:cc:2d:3d:08:e9:45:22:4b:94: e9:bd:d3:27:77:5c:f4:fe:de:bd:2c:88:ec:4a:5c: 22:e0:83:1a:19:4b:d9:34:63:82:d6:cc:f4:fc:43: 62:80:99:a9:ba:86:e1:96:ce:db:cf:c3:cb:84:dd: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:A1:1C:CC:FE:44:41:D4:7B:F2:77:1B:B4:E6:CB:97:9A:0E:1D X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ZtShHMz-REHUe_J3G7Tmy5eaDh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.129.4.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:f8:ab:b0:f2:05:02:e7:7b:66:72:d8:c8:fa:c7:c9:53:e5: f3:05:25:0d:51:bc:15:14:94:ef:54:e2:26:c6:27:18:24:58: 55:9e:ee:4d:a3:67:03:20:7f:3f:89:66:50:3d:6d:9f:ca:ef: 30:b9:e9:3b:bf:46:aa:eb:f4:6e:8a:01:41:4c:41:25:27:f1: ac:5b:a6:55:0d:3c:ef:1e:23:72:4f:c4:38:c1:1c:0b:eb:59: f4:88:e9:7d:8a:f6:b7:36:32:b2:b5:26:18:28:44:a1:5a:70: 00:5d:6d:59:e9:de:86:0f:07:6f:47:d4:3d:14:56:19:b4:b6: 5e:8c:a9:a4:ac:01:10:b4:9e:20:ea:35:2f:a4:36:55:57:ca: ad:38:37:fc:42:b4:bb:21:68:1a:0e:a0:55:8b:20:56:68:79: 9c:b4:b0:1e:26:89:96:66:9c:ef:f7:86:c3:5c:45:b8:ca:b1: e9:eb:03:c4:a1:35:20:f5:2a:6e:ec:ce:b5:9c:20:67:4f:d4: 7e:db:b8:ea:b5:fb:b7:b4:45:9c:87:40:8a:aa:e8:73:aa:8e: d1:97:73:fa:65:d7:95:aa:46:92:ec:7f:a3:c7:20:72:14:ae: c4:fc:59:4f:a7:95:f5:16:a3:da:7f:43:b7:f6:6c:42:d8:d7: ff:fa:18:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pq0FWMTjXyzsBrR0mAm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQ0YTExY2NjZmU0NDQxZDQ3YmYyNzcxYmI0ZTZjYjk3OWEwZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcb8QakGsfpN3+D4yeUtbDQuRoNm S2N5fpdyRk5pa3z+r5LaVASVgJ7LfHnhQg1hsOxG67uBHc0NUo5POMzHbILQI+R+ 4WK3k2/FHfSqjEqCrHo1TBCAoeg+Yf8DswscZFCMPcvXzUcT96wbqa+coq5+yFOS hqrnSgKcopChvMniNxtsaHWwu+T2VnEmm6ap1R+zfIlQkVHtF5Grz0viQVtqed9S 5XBT5Ahk20z5pDKqUwi7Yw47L4aRgu78OBPf44OuEuVYVoXMLT0I6UUiS5TpvdMn d1z0/t69LIjsSlwi4IMaGUvZNGOC1sz0/ENigJmpuobhls7bz8PLhN3/dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbUoRzM/kRB1Hvydxu05suXmg4dMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvWnRTaEhNei1SRUhVZV9KM0c3VG15NWVhRGgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUoEEMA0G CSqGSIb3DQEBCwUAA4IBAQBf+Kuw8gUC53tmctjI+sfJU+XzBSUNUbwVFJTvVOIm xicYJFhVnu5No2cDIH8/iWZQPW2fyu8wuek7v0aq6/RuigFBTEElJ/GsW6ZVDTzv HiNyT8Q4wRwL61n0iOl9iva3NjKytSYYKEShWnAAXW1Z6d6GDwdvR9Q9FFYZtLZe jKmkrAEQtJ4g6jUvpDZVV8qtODf8QrS7IWgaDqBViyBWaHmctLAeJomWZpzv94bD XEW4yrHp6wPEoTUg9Spu7M61nCBnT9R+27jqtfu3tEWch0CKquhzqo7Rl3P6ZdeV qkaS7H+jxyByFK7E/FlPp5X1FqPaf0O39mxC2Nf/+hjW -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:27 2026 by rpki-client